Privacy & Security Policy
Welcome to AboutOK. We provide search, personal workspaces, gaming, and translation services through our unified platform. Protecting your privacy, maintaining data transparency, and securing your credentials across our ecosystem is our fundamental commitment.
Information We Collect
AboutOK collects only the information strictly necessary to create accounts, authenticate users, deliver services, maintain platform security, and operate our infrastructure.
1.1 Information Provided Directly by Users
Depending on how you interact with our platform, you may provide the following information directly:
- Full Name: First name and last name provided during registration or profile updates, used to identify you and personalize your experience.
- Email Address: Primary email used for account identification, verification OTPs, password resets, and critical service notifications.
- Authentication Credentials: Passwords for email-based accounts are secured using robust cryptographic one-way hashing with salt (bcrypt). Passwords are never stored in plain text.
- Profile Details: Optional profile information such as username, avatar image, date of birth, and gender.
- Support Inquiries: Information and messages submitted when contacting our customer support or compliance team.
1.2 Automatically Collected Technical Information
When you access AboutOK services, our infrastructure automatically records technical parameters required for session management, performance, and fraud prevention:
- IP Address: Collected to maintain session security, facilitate geographic routing, and prevent abusive bot behavior.
- Device & Hardware Details: Device type (Desktop, Mobile, Tablet) and device name to track authorized active sessions.
- Browser & Operating System: Browser vendor/version and OS to ensure optimal rendering, responsiveness, and compatibility.
- Usage & Technical Logs: Operational telemetry related to search queries, weather requests, and translation interactions.
- Session Identifiers & Cookies: Cryptographically generated session tokens to maintain your signed-in state securely.
AboutOK Account & Single Sign-On (SSO)
AboutOK provides a centralized authentication and Single Sign-On (SSO) architecture. With one unified AboutOK account, you can log in once and seamlessly access multiple supported AboutOK ecosystem products without having to create separate accounts or credentials for each service.
Global Registration & Availability
Worldwide AccessAboutOK account registration is open to users globally across almost all countries and territories worldwide, enabling international access to our ecosystem products in accordance with applicable local laws and statutory compliance.
Supported AboutOK Services
How SSO Session & Authentication Data Is Used
- Authenticating your identity and establishing an encrypted session across supported services.
- Recognizing your AboutOK account across all official subdomains under .aboutok.com via secure HTTP-only cookies.
- Enabling seamless transitions between products without requiring repeated logins.
- Monitoring session health, detecting unusual or suspicious login attempts, and allowing you to inspect or revoke active sessions.
- Protecting accounts against token theft, session hijacking, and unauthorized cross-origin requests.
AboutOK's SSO system is designed with security-first principles. We never expose internal authentication tokens, private encryption keys, or database credentials.
Third-Party Authentication
You may choose to create an account or sign in to AboutOK using trusted third-party authentication providers: Google, Microsoft, or Apple. When you choose third-party authentication, AboutOK requests only the minimum basic identity claims necessary to authenticate your identity and link your unified AboutOK account.
Information Google May Make Available
- •Unique Google Account identifier (sub)
- •Email address and email verification status
- •Name (given name and family name)
- •Profile picture URL
What AboutOK Actually Receives & Stores
- Google Account unique identifier (stored as provider account ID to associate your sign-in)
- Primary email address
- First name and last name
- Profile picture (stored to display your account avatar)
- Email verification confirmation
How This Information Is Used
- •Authenticating your identity and securely linking your Google sign-in to your AboutOK account.
- •Creating your unified AboutOK profile on your first sign-in.
- •Maintaining your active login session across AboutOK products.
- •Displaying your profile name and avatar across supported services.
- •Sending critical account security notifications.
What AboutOK Does NOT Access
AboutOK does NOT request, access, or store your Gmail messages, Google Drive files, Google Contacts, Google Calendar, or any other private Google Workspace data.
Why We Collect Name, Email & Profile Data
Every personal data attribute collected by AboutOK serves an explicit, functional purpose essential for operating our platform:
Email Address
Serves as the primary unique key for your AboutOK account. Essential for account verification, password resets, security notifications, customer support, and linking third-party authentication providers.
Full Name
Personalizes your account experience, displays your user identity across supported AboutOK services (Search, Space, Console), and ensures accurate correspondence.
Profile Picture / Avatar
Provides visual identity across AboutOK services. Uploaded avatars are stored securely in protected cloud object storage. Users can upload, update, or permanently delete their avatar at any time.
Authentication Provider Identifier
The unique subject identifier (sub) provided by Google, Microsoft, or Apple allows AboutOK to recognize returning users and securely associate the external identity with their internal AboutOK account without storing third-party passwords.
How We Use Information
AboutOK processes collected data strictly for legitimate operational, security, and service delivery objectives:
- Creating, maintaining, and administering your unified AboutOK account.
- Providing Single Sign-On (SSO) and maintaining persistent, encrypted login sessions across supported services.
- Delivering core product functionality, including search queries, weather forecasts, gaming, and translation services.
- Personalizing account interfaces, user settings, and product preferences.
- Sending essential transactional communications, security alerts, and verification codes.
- Detecting, preventing, and mitigating fraudulent activities, unauthorized access, and security vulnerabilities.
- Monitoring infrastructure health, debugging technical issues, and optimizing platform performance.
- Complying with applicable statutory, regulatory, and legal obligations.
AboutOK does NOT sell personal data, nor do we monetize your private credentials or personal search activity.
Data Storage & Security
AboutOK employs robust organizational and technological safeguards to protect personal data from unauthorized access, loss, misuse, or alteration:
Password Protection
Passwords for email-registered accounts are secured using industry-standard cryptographic one-way hashing with salt (bcrypt). Passwords are never stored in plain text.
Encryption in Transit
All communications between your client device and AboutOK servers are encrypted using modern Transport Layer Security (TLS/HTTPS).
Encrypted Sessions
Active sessions are tracked in high-performance, secure memory stores (Redis) using cryptographic session token hashes and automated time-to-live expiration.
Protected Cloud Storage
User avatars and assets are hosted in enterprise-grade, encrypted object storage with restricted access permissions.
Role-Based Access Control (RBAC)
Internal access to user databases is restricted to authorized personnel on a strict need-to-know basis.
Continuous Defense
Automated firewall inspection, DDoS protection, bot mitigation (Cloudflare Turnstile), and vulnerability assessments.
Data Sharing & Third Parties
We respect user privacy and do not sell, rent, or trade your personal information. Data is shared strictly under the following controlled circumstances:
Authentication Providers
During login, direct token verification takes place with Google, Microsoft, or Apple to authenticate identity. Authentication provider data is strictly utilized for account association.
Trusted Infrastructure Processors
We partner with reputable cloud infrastructure providers (secure cloud hosting, database hosting, transactional email delivery for OTPs, and Cloudflare WAF/security) bound by strict data processing and confidentiality agreements.
Legal & Regulatory Compliance
We may disclose personal data if required by law, court order, or governmental regulation, or when necessary to protect the vital rights, safety, and security of our users and platform.
We do not sell personal data to advertisers, data brokers, or marketing intermediaries under any circumstances.
Data Retention & Account Deletion
We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:
Active Accounts
Profile records, authentication associations, and user preferences are retained while your AboutOK account remains active.
Inactive Accounts
Accounts that exhibit zero login or activity for 30 consecutive days are automatically scheduled for permanent deletion.
User-Initiated Deletion
Users can request complete account and data deletion at any time. Deletion cascades across our databases to permanently purge profile records, linked auth accounts, and active session tokens.
Audit & Security Logs
Technical access logs required for forensic security and fraud prevention are retained in anonymized format for minimal legally required windows before automated purging.
Your Rights & Transparency
In accordance with global data protection frameworks (including GDPR, CCPA, and India's DPDP Act, 2023), you have substantial rights regarding your personal information:
Right to Access
You have the right to request a full overview of the personal data we store about you and inspect all active login sessions.
Right to Rectification
You can update your personal information (name, username, date of birth, gender, and avatar) directly within your account settings.
Right to Data Portability
AboutOK provides a dedicated data export feature allowing users to download their complete account profile and session history in machine-readable CSV and formatted PDF formats.
Right to Erasure ('Right to be Forgotten')
You can request the permanent deletion of your AboutOK account and all associated data.
Right to Withdraw Consent
You may disconnect third-party auth providers or close your account at any time to cease further data processing.
How to Exercise Your Rights
You can exercise most rights directly inside your AboutOK account dashboard. For data deletion requests, inquiries, or data protection assistance, contact our dedicated team: